This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json) Hash identifier: JEqwL0j+Pj9VWpN/MdC3F36ibbS0VWAjNNhaZx5Hl10= Subject key identifier: C5:32:C4:A2:48:D1:1D:53:B2:A4:AB:B8:0F:95:5C:6D:99:8B:80:AA Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b Certificate serial: 019B40C8BE548436211CE3E7AB83AEEF18EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 12:00:56 +0000 Manifest this update: Sun 21 Dec 2025 12:00:56 +0000 Manifest next update: Mon 22 Dec 2025 12:00:56 +0000 Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=) 2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: u32K4tsMxf+PBUhNw4njvogF4OW+88pYLN5aZDiISd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:be:54:84:36:21:1c:e3:e7:ab:83:ae:ef:18:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b Validity Not Before: Dec 21 12:00:56 2025 GMT Not After : Dec 22 12:00:56 2025 GMT Subject: CN=c532c4a248d11d53b2a4abb80f955c6d998b80aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:49:64:a2:8c:dc:0a:62:5e:28:32:2b:b0:8d: b7:9f:00:7e:4c:74:c7:0a:3e:f4:20:cd:d2:34:0f: 57:80:00:4a:b7:f5:e2:4f:d0:09:8c:b2:3e:94:b0: 7b:67:3c:eb:80:a8:43:7b:95:46:f3:ff:89:45:71: c4:9b:6c:59:aa:9b:a5:dd:bf:34:55:0a:24:44:1b: f3:5f:97:23:9c:b8:2f:d5:db:72:cb:2f:de:06:3b: 91:eb:2c:e2:8d:87:23:a2:74:b1:4f:5b:43:c5:c5: fd:75:0b:81:f6:45:6d:d9:a3:0d:08:1d:62:96:ee: da:10:fb:5c:47:22:f4:e0:28:fa:82:83:f4:dc:0d: b5:4d:fa:cb:38:4f:f7:e0:61:ae:84:04:61:29:c1: 6a:1c:bd:df:70:51:7d:23:48:b4:45:d8:20:37:0b: c5:49:fe:b1:98:66:ab:52:50:8a:64:1c:9f:3a:36: 06:34:61:1b:7d:36:12:ec:f4:17:23:8b:b0:d8:db: 05:1d:47:40:b2:3a:3a:54:fb:73:27:25:c0:40:31: 88:b1:25:a9:bc:e5:dc:30:95:16:c6:8a:62:fc:30: 87:80:02:7a:c1:bf:16:6c:d0:62:30:15:0e:c1:50: 82:6b:ac:73:3c:be:70:fe:fd:84:82:70:89:03:82: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:32:C4:A2:48:D1:1D:53:B2:A4:AB:B8:0F:95:5C:6D:99:8B:80:AA X509v3 Authority Key Identifier: keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f6:da:9e:06:69:d5:7e:fb:f3:87:9d:2a:6c:50:d6:91:b8: 35:15:12:e9:b1:4c:cc:36:97:84:bc:e9:63:db:c1:0e:18:bf: 58:3e:55:7f:5f:14:3a:a1:7c:69:86:e2:7a:21:d7:0e:f8:22: 58:48:cc:18:b8:ed:b7:da:f0:1e:99:3c:11:c7:e3:1d:22:28: c8:27:90:d2:f1:4c:af:cd:33:c4:b6:7b:15:9a:8d:ef:b5:a9: f2:49:ac:0f:81:83:38:a5:5b:74:60:a9:46:51:1f:1e:a8:52: f2:63:11:d1:a9:02:99:50:18:19:3b:70:34:f9:4c:87:ac:0e: 6e:e3:89:3d:4e:4f:d0:e9:1f:ba:d5:81:14:ff:3a:1d:28:f4: 72:57:e7:9d:08:70:c8:de:ea:92:f7:27:94:af:f0:72:d0:8a: 5e:4f:4a:e3:5b:ee:af:32:54:75:73:26:08:4a:78:dc:51:1d: 9c:76:cd:91:8f:7a:75:20:e2:35:2a:c9:a6:69:cf:87:77:35: b5:d5:6d:6d:f2:ea:1e:b7:27:36:d3:6e:59:ae:1e:41:9e:43: 29:11:29:10:f5:28:a3:4c:57:96:24:5a:9f:36:76:a7:ac:d2: 14:64:53:32:61:97:e6:68:8c:e7:4e:fc:0e:d5:50:54:6d:a8: 85:8d:79:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyL5UhDYhHOPnq4Ou7xjvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzJhZWYwMDY3YzRmMGJhMjBlZTY2NjM0NDAwMDViMWIz Yjg4N2IwHhcNMjUxMjIxMTIwMDU2WhcNMjUxMjIyMTIwMDU2WjAzMTEwLwYDVQQD EyhjNTMyYzRhMjQ4ZDExZDUzYjJhNGFiYjgwZjk1NWM2ZDk5OGI4MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmElkoozcCmJeKDIrsI23nwB+THTH Cj70IM3SNA9XgABKt/XiT9AJjLI+lLB7ZzzrgKhDe5VG8/+JRXHEm2xZqpul3b80 VQokRBvzX5cjnLgv1dtyyy/eBjuR6yzijYcjonSxT1tDxcX9dQuB9kVt2aMNCB1i lu7aEPtcRyL04Cj6goP03A21TfrLOE/34GGuhARhKcFqHL3fcFF9I0i0RdggNwvF Sf6xmGarUlCKZByfOjYGNGEbfTYS7PQXI4uw2NsFHUdAsjo6VPtzJyXAQDGIsSWp vOXcMJUWxopi/DCHgAJ6wb8WbNBiMBUOwVCCa6xzPL5w/v2EgnCJA4JzYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUyxKJI0R1TsqSruA+VXG2Zi4CqMB8GA1UdIwQY MBaAFJ4yrvAGfE8Log7mZjRAAFsbO4h7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYt YzMxYzZkODY5MWQwLzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYtYzMxYzZkODY5MWQw LzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPbangZp 1X7784edKmxQ1pG4NRUS6bFMzDaXhLzpY9vBDhi/WD5Vf18UOqF8aYbieiHXDvgi WEjMGLjtt9rwHpk8EcfjHSIoyCeQ0vFMr80zxLZ7FZqN77Wp8kmsD4GDOKVbdGCp RlEfHqhS8mMR0akCmVAYGTtwNPlMh6wObuOJPU5P0OkfutWBFP86HSj0clfnnQhw yN7qkvcnlK/wctCKXk9K41vurzJUdXMmCEp43FEdnHbNkY96dSDiNSrJpmnPh3c1 tdVtbfLqHrcnNtNuWa4eQZ5DKREpEPUoo0xXliRanzZ2p6zSFGRTMmGX5miM5078 DtVQVG2ohY15Lg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:38:36 2025 by rpki-client